Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/tWmQ2pUGK16j7z9mvaIEwUfeOUg.roa
File: tWmQ2pUGK16j7z9mvaIEwUfeOUg.roa (raw, json)
Hash identifier: vp58edDRo+U4KmMijQ5Gk5Yu5ot8h+HOVDUNrsUjHJA=
Subject key identifier: B5:69:90:DA:95:06:2B:5E:A3:EF:3F:66:BD:A2:04:C1:47:DE:39:48
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0956
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/tWmQ2pUGK16j7z9mvaIEwUfeOUg.roa
Signing time: Tue 07 Jun 2022 10:08:06 +0000
ROA not before: Tue 07 Jun 2022 10:08:06 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 19120
IP address blocks: 101.49.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jun 7 10:08:06 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=B56990DA95062B5EA3EF3F66BDA204C147DE3948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:f3:86:16:ac:46:aa:e8:1e:e0:1a:ae:3b:
7a:2b:29:cb:c0:d7:3b:ac:07:2a:30:f8:3d:85:56:
3f:88:4c:3d:27:f8:42:8c:35:f5:a4:0d:71:92:54:
40:f0:40:22:77:33:0f:d0:af:58:c4:93:5a:57:1c:
da:76:1a:32:c0:74:3f:46:77:39:ac:23:17:e1:6c:
c3:25:9b:ca:da:23:9f:bb:00:e9:2f:e8:de:41:5f:
6c:72:37:fc:56:1d:49:6b:d4:1b:97:78:48:c2:29:
dc:5a:05:81:3d:bf:af:5c:57:a6:44:fa:fc:a1:48:
75:61:fe:da:16:ed:d8:38:38:fc:50:e0:f1:0c:d3:
40:af:2f:56:4d:f8:23:bb:4a:05:5a:f4:c1:bc:1f:
92:8a:38:7d:d3:e1:86:17:03:f2:a4:8c:19:08:92:
9c:a2:c3:f7:82:1a:56:64:9b:21:7b:44:73:77:a6:
62:50:4a:71:7f:b7:75:a0:01:ba:1e:b8:4c:e0:94:
16:c7:6f:70:40:de:a1:b6:ce:4c:f7:77:51:f6:45:
07:24:ce:1a:bf:88:52:69:07:8c:07:ee:ee:c3:fc:
76:05:99:fe:4e:37:cf:c5:85:41:80:fc:7c:1f:8a:
e8:ce:8e:c3:1d:f1:d9:a3:00:4b:93:9d:fc:00:fe:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:90:DA:95:06:2B:5E:A3:EF:3F:66:BD:A2:04:C1:47:DE:39:48
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/tWmQ2pUGK16j7z9mvaIEwUfeOUg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.64.0/18
Signature Algorithm: sha256WithRSAEncryption
45:9c:f8:e4:77:5b:44:f2:66:ec:46:ff:3e:e8:7d:84:e1:2d:
e1:fe:cb:e7:6b:f6:a9:26:c6:45:1d:52:94:46:1a:3c:9c:69:
7d:de:37:71:33:c7:9d:d8:fd:69:8a:0f:d2:b0:fc:16:30:53:
c2:2f:47:98:4a:d4:ed:e9:59:69:c4:8e:ab:0c:c7:e8:ae:42:
96:b1:5c:08:ee:83:d1:6e:17:bc:db:5e:1f:46:7e:98:9a:03:
e2:01:ac:84:37:71:12:f3:9c:70:cb:e4:74:29:26:ee:9f:45:
6a:ff:f4:23:8c:bf:47:9f:16:46:41:0b:f1:77:b9:78:59:e4:
0c:a3:d0:f2:11:eb:6a:eb:29:b1:2a:4e:2a:4c:90:11:83:85:
3c:5b:68:86:10:a1:8c:31:33:d2:9d:b6:a4:ed:46:42:74:d5:
b9:60:d5:a8:16:eb:8f:bc:a9:88:f7:77:f4:77:95:3f:ce:1e:
b9:12:d0:39:fb:a0:e9:19:a3:ec:a5:2b:33:2b:79:dc:5a:e9:
9c:94:9c:61:9c:08:37:36:cc:cc:1f:61:b9:65:27:e7:ad:6d:
bc:7b:97:72:4a:2e:1b:28:e5:46:1c:1c:48:1e:3d:5d:3c:fa:
3b:b7:09:9c:68:d4:ad:6d:f2:69:7e:e8:01:20:e4:25:dd:16:
b3:08:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org